I came back from NZ yesterday and checked my junk mail account (the address I use for everything but personal e-mail, and it gets 99% spam). It had 350 messages, including the spoofed message from US Bank, and also from Citi Bank. Thexe folks are getting pretty clever.